Malware.AI.928297474 (file analysis)

The Malware.AI.928297474 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.928297474 virus can do?

• Executable code extraction
• Injection with CreateRemoteThread in a remote process
• Creates RWX memory
• A process attempted to delay the analysis task.
• Starts servers listening on 0.0.0.0:21
• Expresses interest in specific running processes
• Unconventionial language used in binary resources: Russian
• Uses Windows utilities for basic functionality
• Tries to suspend Cuckoo threads to prevent logging of malicious activity
• Code injection with CreateRemoteThread in a remote process
• Enumerates services, possibly for anti-virtualization
• Crashed cuckoomon during analysis. Report this error to the Github repo.
• Tries to unhook or modify Windows functions monitored by Cuckoo
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Mimics the file times of a Windows system file
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Clears Windows events or logs
• Creates a copy of itself
• Anomalous binary characteristics

How to determine Malware.AI.928297474?

File Info:
crc32: E88D86CA
md5: a78db79a3479da790fa718a045af5416
name: A78DB79A3479DA790FA718A045AF5416.mlw
sha1: d824d36fbf965418bdee5529b7e037d996a73722
sha256: 0c2e377bfa9c5fc7895a482f121e3cf7e2e9d7daee9ec21c7d8d12fa3f58b3b5
sha512: 7749e1c12b8ee1f08eb21a74e9fdd98689e83abc3e43202a11ed5524e5ed36f04ce246c8f4c294a92f049bfe423e5238df5f69c9e2a9d3b37842164c0ca8bea4
ssdeep: 3072:Vk59fo2r2f0oJDib8iLws7ngPwwGj9Tf:Vk7o2r2fj2P8sbgxGj9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Malware.AI.928297474 also known as:

How to remove Malware.AI.928297474?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.